Contents

# Authorization header definitions

require 'securerandom'
require 'base64'
require 'uri'
require 'openssl'

# NOTE: the following is the Telesign crew who made the python version
#       from which this codes was inspired

# __author__ = "Jeremy Cunningham, Michael Fox, and Radu Maierean"
# __copyright__ = "Copyright 2012, TeleSign Corp."
# __credits__ = ["Jeremy Cunningham", "Radu Maierean", "Michael Fox", "Nancy Vitug", "Humberto Morales"]
# __license__ = "MIT"

AUTH_METHOD = {
    sha1: {hash: OpenSSL::Digest::SHA1, name: 'HMAC-SHA1'},
    sha256: {hash: OpenSSL::Digest::SHA256, name: 'HMAC-SHA256'}
}

module Telesignature
  class Auth
    def self.generate_auth_headers(opts = {})
      content_type = opts[:content_type] ? opts[:content_type] : ''
      auth_method = opts[:auth_method] ? opts[:auth_method] : :sha1
      fields = opts[:fields] ? opts[:fields] : nil

      customer_id = opts[:customer_id]
      secret_key = opts[:secret_key]
      resource = opts[:resource]
      method = opts[:method]

      current_date = Time.now.strftime("%a, %d %b %Y %H:%M:%S %z")
      nonce = SecureRandom.uuid

      if %w(POST PUT).include? method
        content_type = "application/x-www-form-urlencoded"
      end

      string_to_sign = "%s\n%s\n\nx-ts-auth-method:%s\nx-ts-date:%s\nx-ts-nonce:%s" % [
              method,
              content_type,
              AUTH_METHOD[auth_method][:name],
              current_date,
              nonce]

      if fields
        string_to_sign += "\n%s" % URI.encode_www_form(fields)
      end

      string_to_sign += "\n%s" % resource

      digest = AUTH_METHOD[auth_method][:hash].new
      signer = OpenSSL::HMAC.digest digest, Base64.decode64(secret_key), string_to_sign

      signature = Base64.encode64 signer

      {
        'Authorization' => "TSA %s:%s" % [customer_id, signature],
        'x-ts-date' => current_date,
        'x-ts-auth-method' => AUTH_METHOD[auth_method][:name],
        'x-ts-nonce' => nonce
      }
    end
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
telesignature-0.0.11	lib/telesignature/auth.rb